This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
File:                     djSthmVu_mxF5O-Zj5S2l6w5vvE.mft (raw, json)
Hash identifier:          5dGkIU4pCneRy6MjKymtRyoJwHXzNU3PfuGQzY25aus=
Subject key identifier:   C3:0D:8F:0E:D7:FE:BB:93:1B:43:1D:A8:62:13:A0:2D:72:92:00:60
Authority key identifier: 76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1
Certificate issuer:       /CN=A91B23D9/serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1
Certificate serial:       AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
Manifest number:          AD
Signing time:             Fri 05 Dec 2025 04:07:35 +0000
Manifest this update:     Fri 05 Dec 2025 04:07:34 +0000
Manifest next update:     Fri 12 Dec 2025 04:07:34 +0000
Files and hashes:         1: djSthmVu_mxF5O-Zj5S2l6w5vvE.crl (hash: Hon8J6/KV0crVOic9i6JfjQlcNMn94o3cOoplwX5iB8=)
                          2: 5FF7DA8AC9DD11EF9A19CE57C4F9AE02.roa (hash: +gnNwknF2udgbeSCQKAvlJ+Kl8XnvhGtCbKQkcxQ+I8=)
                          3: 7BC585BEC9DD11EF98B1E263C4F9AE02.roa (hash: ZZi0Gn/OMvF3e89O2m6QByhZ3253TVeiYiuccUZGQj0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl
                          rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B23D9, serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1
        Validity
            Not Before: Dec  5 04:07:34 2025 GMT
            Not After : Dec 12 04:07:34 2025 GMT
        Subject: CN=69325a87-f069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e4:a0:3a:1a:98:ec:22:a3:52:70:cf:0e:11:
                    57:32:98:ee:ba:4f:60:ab:c0:26:08:a9:9b:07:b7:
                    57:b5:98:c3:77:96:a8:ec:67:f8:16:39:d0:07:2a:
                    a5:a9:17:17:5e:7d:04:d7:ae:29:ab:36:de:75:94:
                    68:7c:6b:14:0a:ca:a7:82:cb:dc:6b:5f:2e:4d:9a:
                    26:57:e7:6d:ba:b4:7d:f4:2a:b6:6a:6e:42:4d:8e:
                    d9:a2:38:75:2a:38:53:e0:45:07:37:72:4b:ea:8c:
                    9f:c1:0c:f4:c4:f5:cc:4a:53:9b:ce:e3:1e:48:d6:
                    28:d6:1f:3e:a2:2d:fb:1b:d8:2b:dc:02:b6:e5:2b:
                    ad:b8:72:3d:94:b2:ec:1d:ba:46:72:09:8a:d7:7d:
                    56:fb:4d:89:82:c7:46:28:04:47:7e:57:ba:a6:db:
                    fa:c8:16:22:4e:f6:1f:f5:97:b3:8c:58:24:52:3c:
                    b7:ec:c0:e2:11:b0:8d:10:56:ac:77:c1:e7:79:d0:
                    17:55:26:f4:68:53:ec:60:15:f7:34:fb:c6:ef:be:
                    d4:9c:37:13:9b:c9:49:8c:ac:b5:3b:03:72:ee:77:
                    c3:b7:77:d2:5e:1a:86:29:69:a8:ac:17:58:91:f5:
                    c4:53:39:eb:ef:67:42:8b:a8:af:1f:e9:f0:28:1a:
                    a9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0D:8F:0E:D7:FE:BB:93:1B:43:1D:A8:62:13:A0:2D:72:92:00:60
            X509v3 Authority Key Identifier:
                keyid:76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:e9:ef:56:d2:c0:de:9c:1c:06:c5:b5:32:30:90:0f:79:ae:
         22:e5:62:db:87:e5:54:81:3f:d1:93:24:07:66:39:04:e0:04:
         51:bd:93:c0:9d:2e:a8:c1:5b:9c:64:0e:0e:b2:23:46:d3:45:
         3a:3a:a4:ef:d4:f1:68:28:c4:e5:1b:18:55:1a:97:3b:68:01:
         3b:a2:01:db:1a:6d:3e:c3:68:80:3f:30:d0:64:45:54:4a:4c:
         b2:99:06:61:7c:31:cc:e5:ce:e5:10:2e:bd:96:87:2a:e3:81:
         89:7c:33:46:bd:3d:01:e7:62:3a:1d:ce:f3:91:f8:1e:36:79:
         4b:33:8f:76:63:c9:47:db:de:76:05:dd:e8:e1:1f:6b:88:74:
         b7:91:4a:9b:6c:5a:63:f3:5f:01:f0:a9:bd:1c:89:8b:bd:03:
         0e:6d:69:ac:ac:2c:ad:a8:e7:a2:fa:a2:0d:b3:33:92:48:0b:
         f1:b3:66:5e:9b:c7:db:d1:d8:bd:6e:e9:b3:53:64:2f:9a:54:
         c8:a9:00:58:3e:94:f6:1a:86:72:d7:29:d4:d2:4a:16:9a:de:
         64:03:4b:1d:b7:b4:46:37:c0:d9:d9:f6:ee:76:88:dd:7b:e0:
         0a:2d:94:bf:83:50:f3:15:91:12:a9:d6:dc:62:a4:bc:d6:19:
         49:25:f3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:30:45 2025 by rpki-client